[ 53.120179][ T40] audit: type=1400 audit(1770590603.549:59): avc: denied { write } for pid=5910 comm="sh" path="pipe:[5553]" dev="pipefs" ino=5553 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 53.129704][ T40] audit: type=1400 audit(1770590603.549:60): avc: denied { rlimitinh } for pid=5910 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 53.139628][ T40] audit: type=1400 audit(1770590603.549:61): avc: denied { siginh } for pid=5910 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:41891' (ED25519) to the list of known hosts. [ 59.441521][ T40] audit: type=1400 audit(1770590609.889:62): avc: denied { execute } for pid=5931 comm="sh" name="syz-execprog" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 59.450360][ T40] audit: type=1400 audit(1770590609.889:63): avc: denied { execute_no_trans } for pid=5931 comm="sh" path="/syz-execprog" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 2026/02/08 22:43:31 parsed 1 programs [ 60.752503][ T40] audit: type=1400 audit(1770590611.199:64): avc: denied { node_bind } for pid=5931 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 63.020185][ T40] audit: type=1400 audit(1770590613.469:65): avc: denied { mounton } for pid=5940 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 63.027922][ T5940] cgroup: Unknown subsys name 'net' [ 63.028855][ T40] audit: type=1400 audit(1770590613.479:66): avc: denied { mount } for pid=5940 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 63.039146][ T40] audit: type=1400 audit(1770590613.479:67): avc: denied { unmount } for pid=5940 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 63.187051][ T5940] cgroup: Unknown subsys name 'cpuset' [ 63.191389][ T5940] cgroup: Unknown subsys name 'rlimit' [ 63.367298][ T40] audit: type=1400 audit(1770590613.819:68): avc: denied { setattr } for pid=5940 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 63.377748][ T40] audit: type=1400 audit(1770590613.839:69): avc: denied { create } for pid=5940 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 63.391499][ T40] audit: type=1400 audit(1770590613.839:70): avc: denied { write } for pid=5940 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 63.397938][ T40] audit: type=1400 audit(1770590613.839:71): avc: denied { read } for pid=5940 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 63.435283][ T5942] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 64.096800][ T5940] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 66.195817][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 66.195834][ T40] audit: type=1400 audit(1770590616.649:82): avc: denied { execmem } for pid=5948 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 66.214368][ T40] audit: type=1400 audit(1770590616.649:83): avc: denied { read } for pid=5949 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 66.221229][ T40] audit: type=1400 audit(1770590616.649:84): avc: denied { open } for pid=5949 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 66.229012][ T40] audit: type=1400 audit(1770590616.649:85): avc: denied { mounton } for pid=5949 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 66.267243][ T40] audit: type=1400 audit(1770590616.719:86): avc: denied { mount } for pid=5949 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 66.276436][ T40] audit: type=1400 audit(1770590616.729:87): avc: denied { mounton } for pid=5949 comm="syz-executor" path="/syzkaller.GJqS6R/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 66.294360][ T40] audit: type=1400 audit(1770590616.729:88): avc: denied { mount } for pid=5949 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 66.301965][ T40] audit: type=1400 audit(1770590616.729:89): avc: denied { mounton } for pid=5949 comm="syz-executor" path="/syzkaller.GJqS6R/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 66.314219][ T40] audit: type=1400 audit(1770590616.729:90): avc: denied { mounton } for pid=5949 comm="syz-executor" path="/syzkaller.GJqS6R/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=5652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 66.323006][ T40] audit: type=1400 audit(1770590616.729:91): avc: denied { unmount } for pid=5949 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 66.333969][ T5949] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 66.905895][ T5976] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.914517][ T5976] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 66.917470][ T5976] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 66.920400][ T5976] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 66.922977][ T5976] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.206872][ T5983] chnl_net:caif_netlink_parms(): no params data found [ 67.269571][ T5983] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.273194][ T5983] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.276033][ T5983] bridge_slave_0: entered allmulticast mode [ 67.279632][ T5983] bridge_slave_0: entered promiscuous mode [ 67.284199][ T5983] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.286662][ T5983] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.289120][ T5983] bridge_slave_1: entered allmulticast mode [ 67.292728][ T5983] bridge_slave_1: entered promiscuous mode [ 67.311778][ T5983] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.316424][ T5983] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.330362][ T5983] team0: Port device team_slave_0 added [ 67.333653][ T5983] team0: Port device team_slave_1 added [ 67.346140][ T5983] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.348303][ T5983] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.356073][ T5983] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.367694][ T5983] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.370422][ T5983] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.381684][ T5983] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.421655][ T5983] hsr_slave_0: entered promiscuous mode [ 67.425040][ T5983] hsr_slave_1: entered promiscuous mode [ 67.597420][ T5983] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.604489][ T5983] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.609668][ T5983] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.614967][ T5983] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.659529][ T5983] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.669242][ T5983] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.674357][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.677160][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.686105][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.688901][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.793977][ T5983] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.816945][ T5983] veth0_vlan: entered promiscuous mode [ 67.822828][ T5983] veth1_vlan: entered promiscuous mode [ 67.837683][ T5983] veth0_macvtap: entered promiscuous mode [ 67.842958][ T5983] veth1_macvtap: entered promiscuous mode [ 67.857325][ T5983] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.869086][ T5983] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.878626][ T62] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.882480][ T62] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.891966][ T62] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.896879][ T62] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.989110][ T62] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.065915][ T62] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.134297][ T62] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.209236][ T62] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.392906][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.396474][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.414265][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.417294][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/02/08 22:43:39 executed programs: 0 [ 69.457976][ T5294] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.461416][ T5294] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.464614][ T5294] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.468157][ T5294] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.471039][ T5294] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.606403][ T6049] chnl_net:caif_netlink_parms(): no params data found [ 69.680488][ T6049] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.683530][ T6049] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.686844][ T6049] bridge_slave_0: entered allmulticast mode [ 69.690637][ T6049] bridge_slave_0: entered promiscuous mode [ 69.695418][ T6049] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.698400][ T6049] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.701660][ T6049] bridge_slave_1: entered allmulticast mode [ 69.705922][ T6049] bridge_slave_1: entered promiscuous mode [ 69.738686][ T6049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.745267][ T6049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.771113][ T6049] team0: Port device team_slave_0 added [ 69.776049][ T6049] team0: Port device team_slave_1 added [ 69.790130][ T6049] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.792314][ T6049] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.800209][ T6049] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.804505][ T6049] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.806694][ T6049] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.814851][ T6049] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.836513][ T6049] hsr_slave_0: entered promiscuous mode [ 69.838776][ T6049] hsr_slave_1: entered promiscuous mode [ 69.840831][ T6049] debugfs: 'hsr0' already exists in 'hsr' [ 69.842662][ T6049] Cannot create hsr debugfs directory [ 71.134980][ T62] bridge_slave_1: left allmulticast mode [ 71.136972][ T62] bridge_slave_1: left promiscuous mode [ 71.139471][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.145877][ T62] bridge_slave_0: left allmulticast mode [ 71.147735][ T62] bridge_slave_0: left promiscuous mode [ 71.149590][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.338590][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 71.342798][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 71.346478][ T62] bond0 (unregistering): Released all slaves [ 71.428133][ T40] kauditd_printk_skb: 20 callbacks suppressed [ 71.428149][ T40] audit: type=1400 audit(1770590621.879:112): avc: denied { create } for pid=6062 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 71.443995][ T40] audit: type=1400 audit(1770590621.889:113): avc: denied { write } for pid=6062 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth2.link" dev="tmpfs" ino=2086 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 71.455144][ T40] audit: type=1400 audit(1770590621.889:114): avc: denied { append } for pid=6062 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" dev="tmpfs" ino=2086 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 71.473018][ T62] hsr_slave_0: left promiscuous mode [ 71.478040][ T62] hsr_slave_1: left promiscuous mode [ 71.480167][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.482514][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.485559][ T5294] Bluetooth: hci0: command tx timeout [ 71.486367][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.490056][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.500271][ T40] audit: type=1400 audit(1770590621.949:115): avc: denied { unlink } for pid=6065 comm="rm" name="resolv.conf.eth2.link" dev="tmpfs" ino=2086 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 71.500495][ T62] veth1_macvtap: left promiscuous mode [ 71.511692][ T62] veth0_macvtap: left promiscuous mode [ 71.513907][ T62] veth1_vlan: left promiscuous mode [ 71.515866][ T62] veth0_vlan: left promiscuous mode [ 71.721442][ T62] team0 (unregistering): Port device team_slave_1 removed [ 71.737699][ T62] team0 (unregistering): Port device team_slave_0 removed [ 72.346846][ T6049] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.351943][ T6049] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.356503][ T6049] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.361224][ T6049] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.402126][ T6049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.411464][ T6049] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.418134][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.421132][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.426643][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.429656][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.776270][ T6049] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.795595][ T6049] veth0_vlan: entered promiscuous mode [ 72.800238][ T6049] veth1_vlan: entered promiscuous mode [ 72.819840][ T6049] veth0_macvtap: entered promiscuous mode [ 72.828826][ T6049] veth1_macvtap: entered promiscuous mode [ 72.840438][ T6049] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.847802][ T6049] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.868293][ T1144] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.872059][ T1144] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.886926][ T1144] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.891243][ T1144] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.961023][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.963508][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.000744][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.004040][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.039765][ T40] audit: type=1400 audit(1770590623.489:116): avc: denied { read write } for pid=6095 comm="syz.0.17" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 73.049223][ T40] audit: type=1400 audit(1770590623.489:117): avc: denied { open } for pid=6095 comm="syz.0.17" path="/dev/raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 73.058661][ T40] audit: type=1400 audit(1770590623.489:118): avc: denied { ioctl } for pid=6095 comm="syz.0.17" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 73.284507][ T5832] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 73.446369][ T5832] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 73.449879][ T5832] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 73.453291][ T5832] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 18403, setting to 1024 [ 73.458884][ T5832] usb 5-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 73.462235][ T5832] usb 5-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 73.465520][ T5832] usb 5-1: Manufacturer: syz [ 73.469195][ T5832] usb 5-1: config 0 descriptor?? [ 73.471910][ T6095] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 73.476641][ T5832] smsusb:smsusb_probe: board id=9, interface number 0 [ 73.481902][ T5832] smsusb:siano_media_device_register: media controller created [ 73.489270][ T5832] usb 5-1: BOGUS urb xfer, pipe 3 != type 1 [ 73.491110][ T5832] smsusb:smsusb_start_streaming: smsusb_submit_urb(...) failed [ 73.493572][ T5832] smsusb:smsusb_init_device: smsusb_start_streaming(...) failed [ 73.497511][ T5832] ------------[ cut here ]------------ [ 73.499235][ T5832] !PageLargeKmalloc(page) [ 73.499242][ T5832] WARNING: mm/slub.c:6797 at free_large_kmalloc+0x96/0xd0, CPU#0: kworker/0:3/5832 [ 73.503438][ T5832] Modules linked in: [ 73.504948][ T5832] CPU: 0 UID: 0 PID: 5832 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT(full) [ 73.507834][ T5832] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 73.510860][ T5832] Workqueue: usb_hub_wq hub_event [ 73.512408][ T5832] RIP: 0010:free_large_kmalloc+0x96/0xd0 [ 73.514217][ T5832] Code: 28 90 0f 0b 90 80 3d f6 c1 3a 0e 00 0f 84 73 3b bf fe 48 8b 74 24 28 48 89 ef e8 f5 0e 0c 00 b8 00 f0 ff ff 45 31 ed eb be 90 <0f> 0b 90 48 83 c4 08 48 89 df 48 c7 c6 13 1e c3 8d 5b 5d 41 5c 41 [ 73.520081][ T5832] RSP: 0018:ffffc9000457ed08 EFLAGS: 00010202 [ 73.521914][ T5832] RAX: 00000000000000ff RBX: ffffea0000f8b880 RCX: ffffffff81b866ee [ 73.524506][ T5832] RDX: 0000000000000000 RSI: ffff88803e2e2000 RDI: ffffea0000f8b880 [ 73.526959][ T5832] RBP: ffff88803e2e2000 R08: 0000000000000007 R09: 0000000000000000 [ 73.529383][ T5832] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880273c5000 [ 73.531751][ T5832] R13: ffff8880273c4000 R14: dffffc0000000000 R15: ffff8880273c50f0 [ 73.534246][ T5832] FS: 0000000000000000(0000) GS:ffff8880d65d9000(0000) knlGS:0000000000000000 [ 73.537022][ T5832] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 73.539029][ T5832] CR2: 00007f337fde8600 CR3: 0000000025f43000 CR4: 0000000000352ef0 [ 73.541493][ T5832] Call Trace: [ 73.542550][ T5832] [ 73.543512][ T5832] usb_free_urb.part.0+0xf8/0x110 [ 73.545266][ T5832] usb_free_urb+0x1f/0x30 [ 73.546764][ T5832] smsusb_term_device+0x108/0x200 [ 73.548350][ T5832] smsusb_init_device+0xb4e/0xbb0 [ 73.549935][ T5832] ? __pfx_smsusb_init_device+0x10/0x10 [ 73.551668][ T5832] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 73.553424][ T5832] ? usb_clear_halt+0x61/0x160 [ 73.555087][ T5832] smsusb_probe+0xd7f/0xe1f [ 73.556643][ T5832] ? __pfx_smsusb_probe+0x10/0x10 [ 73.558246][ T5832] ? mark_held_locks+0x40/0x70 [ 73.559787][ T5832] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 73.561616][ T5832] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 73.563447][ T5832] ? __pm_runtime_set_status+0x13c/0x970 [ 73.565759][ T5832] usb_probe_interface+0x303/0x8f0 [ 73.565811][ T5294] Bluetooth: hci0: command tx timeout [ 73.567469][ T5832] ? __pfx_usb_probe_interface+0x10/0x10 [ 73.571153][ T5832] really_probe+0x241/0xa60 [ 73.572600][ T5832] __driver_probe_device+0x1de/0x400 [ 73.574382][ T5832] driver_probe_device+0x4c/0x1b0 [ 73.576001][ T5832] __device_attach_driver+0x1df/0x340 [ 73.577686][ T5832] ? __pfx___device_attach_driver+0x10/0x10 [ 73.579580][ T5832] bus_for_each_drv+0x159/0x1e0 [ 73.581099][ T5832] ? __pfx_bus_for_each_drv+0x10/0x10 [ 73.582795][ T5832] ? lockdep_hardirqs_on+0x78/0x100 [ 73.584553][ T5832] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 73.586367][ T5832] __device_attach+0x1e4/0x4d0 [ 73.587874][ T5832] ? __pfx___device_attach+0x10/0x10 [ 73.589664][ T5832] ? do_raw_spin_unlock+0x145/0x1e0 [ 73.591282][ T5832] device_initial_probe+0xaf/0xd0 [ 73.592844][ T5832] bus_probe_device+0x64/0x160 [ 73.594458][ T5832] device_add+0x11d9/0x1950 [ 73.595889][ T5832] ? __pfx_device_add+0x10/0x10 [ 73.597436][ T5832] ? preempt_schedule_thunk+0x16/0x30 [ 73.599148][ T5832] usb_set_configuration+0xd97/0x1c60 [ 73.600822][ T5832] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 73.602674][ T5832] usb_generic_driver_probe+0xa1/0xe0 [ 73.604532][ T5832] usb_probe_device+0xef/0x400 [ 73.606065][ T5832] ? __pfx_usb_probe_device+0x10/0x10 [ 73.607733][ T5832] really_probe+0x241/0xa60 [ 73.609212][ T5832] __driver_probe_device+0x1de/0x400 [ 73.610890][ T5832] ? usb_driver_applicable+0x1c7/0x220 [ 73.612610][ T5832] driver_probe_device+0x4c/0x1b0 [ 73.614306][ T5832] __device_attach_driver+0x1df/0x340 [ 73.616018][ T5832] ? __pfx___device_attach_driver+0x10/0x10 [ 73.617940][ T5832] bus_for_each_drv+0x159/0x1e0 [ 73.619446][ T5832] ? __pfx_bus_for_each_drv+0x10/0x10 [ 73.621097][ T5832] ? lockdep_hardirqs_on+0x78/0x100 [ 73.622718][ T5832] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 73.624688][ T5832] __device_attach+0x1e4/0x4d0 [ 73.626166][ T5832] ? __pfx___device_attach+0x10/0x10 [ 73.627788][ T5832] ? do_raw_spin_unlock+0x145/0x1e0 [ 73.629408][ T5832] device_initial_probe+0xaf/0xd0 [ 73.630971][ T5832] bus_probe_device+0x64/0x160 [ 73.632499][ T5832] device_add+0x11d9/0x1950 [ 73.633965][ T5832] ? __pfx_device_add+0x10/0x10 [ 73.635601][ T5832] ? add_device_randomness+0xb7/0xf0 [ 73.637299][ T5832] usb_new_device.cold+0x685/0x115c [ 73.638944][ T5832] ? do_raw_spin_lock+0x128/0x260 [ 73.640545][ T5832] ? __pfx_usb_new_device+0x10/0x10 [ 73.642177][ T5832] ? mark_held_locks+0x40/0x70 [ 73.643703][ T5832] hub_event+0x314d/0x4af0 [ 73.645356][ T5832] ? __pfx_hub_event+0x10/0x10 [ 73.646855][ T5832] ? interval_tree_remove+0x8b0/0xef0 [ 73.648563][ T5832] ? finish_task_switch.isra.0+0x1ff/0xb70 [ 73.650436][ T5832] ? process_one_work+0x80b/0x1840 [ 73.652076][ T5832] ? rcu_is_watching+0x12/0xc0 [ 73.653625][ T5832] process_one_work+0x9c2/0x1840 [ 73.655291][ T5832] ? __pfx_process_one_work+0x10/0x10 [ 73.656995][ T5832] ? assign_work+0x19c/0x250 [ 73.658468][ T5832] worker_thread+0x5da/0xe40 [ 73.659964][ T5832] ? kthread+0x17d/0x730 [ 73.661305][ T5832] ? __pfx_worker_thread+0x10/0x10 [ 73.662919][ T5832] kthread+0x3b3/0x730 [ 73.664367][ T5832] ? __pfx_kthread+0x10/0x10 [ 73.665829][ T5832] ? ret_from_fork+0x79/0xaf0 [ 73.667297][ T5832] ? ret_from_fork+0x79/0xaf0 [ 73.668781][ T5832] ? rcu_is_watching+0x12/0xc0 [ 73.670313][ T5832] ? __pfx_kthread+0x10/0x10 [ 73.671782][ T5832] ret_from_fork+0x754/0xaf0 [ 73.673251][ T5832] ? __pfx_ret_from_fork+0x10/0x10 [ 73.674978][ T5832] ? __switch_to+0x7b9/0x10c0 [ 73.676494][ T5832] ? __pfx_kthread+0x10/0x10 [ 73.677970][ T5832] ret_from_fork_asm+0x1a/0x30 [ 73.679496][ T5832] [ 73.680491][ T5832] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 73.682738][ T5832] CPU: 0 UID: 0 PID: 5832 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT(full) [ 73.685718][ T5832] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 73.688827][ T5832] Workqueue: usb_hub_wq hub_event [ 73.690458][ T5832] Call Trace: [ 73.691524][ T5832] [ 73.692475][ T5832] dump_stack_lvl+0x100/0x190 [ 73.693964][ T5832] vpanic+0x20d/0x630 [ 73.695253][ T5832] panic+0xd1/0xd1 [ 73.696491][ T5832] ? __pfx_panic+0x10/0x10 [ 73.697890][ T5832] ? check_panic_on_warn+0x1f/0x90 [ 73.699499][ T5832] check_panic_on_warn.cold+0x19/0x34 [ 73.701198][ T5832] ? free_large_kmalloc+0x96/0xd0 [ 73.702761][ T5832] __warn.cold+0x191/0x2f8 [ 73.704224][ T5832] __report_bug+0x296/0x3d0 [ 73.705652][ T5832] ? free_large_kmalloc+0x96/0xd0 [ 73.707221][ T5832] ? __pfx___report_bug+0x10/0x10 [ 73.708785][ T5832] ? hub_event+0x314d/0x4af0 [ 73.710218][ T5832] ? process_one_work+0x9c2/0x1840 [ 73.711825][ T5832] ? worker_thread+0x5da/0xe40 [ 73.713389][ T5832] ? kthread+0x3b3/0x730 [ 73.714761][ T5832] ? ret_from_fork+0x754/0xaf0 [ 73.716270][ T5832] ? ret_from_fork_asm+0x1a/0x30 [ 73.717836][ T5832] ? find_held_lock+0x2b/0x80 [ 73.719339][ T5832] ? smscore_unregister_device+0x537/0x7f0 [ 73.721177][ T5832] ? smscore_unregister_device+0x537/0x7f0 [ 73.723025][ T5832] ? free_large_kmalloc+0x96/0xd0 [ 73.724736][ T5832] report_bug+0xb2/0x220 [ 73.726542][ T5832] ? free_large_kmalloc+0x96/0xd0 [ 73.728494][ T5832] handle_bug+0x166/0x2a0 [ 73.730107][ T5832] exc_invalid_op+0x17/0x50 [ 73.731794][ T5832] asm_exc_invalid_op+0x1a/0x20 [ 73.733571][ T5832] RIP: 0010:free_large_kmalloc+0x96/0xd0 [ 73.735561][ T5832] Code: 28 90 0f 0b 90 80 3d f6 c1 3a 0e 00 0f 84 73 3b bf fe 48 8b 74 24 28 48 89 ef e8 f5 0e 0c 00 b8 00 f0 ff ff 45 31 ed eb be 90 <0f> 0b 90 48 83 c4 08 48 89 df 48 c7 c6 13 1e c3 8d 5b 5d 41 5c 41 [ 73.742409][ T5832] RSP: 0018:ffffc9000457ed08 EFLAGS: 00010202 [ 73.744633][ T5832] RAX: 00000000000000ff RBX: ffffea0000f8b880 RCX: ffffffff81b866ee [ 73.747432][ T5832] RDX: 0000000000000000 RSI: ffff88803e2e2000 RDI: ffffea0000f8b880 [ 73.750311][ T5832] RBP: ffff88803e2e2000 R08: 0000000000000007 R09: 0000000000000000 [ 73.753132][ T5832] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880273c5000 [ 73.755908][ T5832] R13: ffff8880273c4000 R14: dffffc0000000000 R15: ffff8880273c50f0 [ 73.758722][ T5832] ? __phys_addr+0xde/0x180 [ 73.760410][ T5832] usb_free_urb.part.0+0xf8/0x110 [ 73.762216][ T5832] usb_free_urb+0x1f/0x30 [ 73.763766][ T5832] smsusb_term_device+0x108/0x200 [ 73.765572][ T5832] smsusb_init_device+0xb4e/0xbb0 [ 73.767382][ T5832] ? __pfx_smsusb_init_device+0x10/0x10 [ 73.769380][ T5832] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 73.771369][ T5832] ? usb_clear_halt+0x61/0x160 [ 73.773112][ T5832] smsusb_probe+0xd7f/0xe1f [ 73.774788][ T5832] ? __pfx_smsusb_probe+0x10/0x10 [ 73.776615][ T5832] ? mark_held_locks+0x40/0x70 [ 73.778348][ T5832] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 73.780485][ T5832] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 73.782585][ T5832] ? __pm_runtime_set_status+0x13c/0x970 [ 73.784620][ T5832] usb_probe_interface+0x303/0x8f0 [ 73.786454][ T5832] ? __pfx_usb_probe_interface+0x10/0x10 [ 73.788461][ T5832] really_probe+0x241/0xa60 [ 73.790080][ T5832] __driver_probe_device+0x1de/0x400 [ 73.791918][ T5832] driver_probe_device+0x4c/0x1b0 [ 73.793699][ T5832] __device_attach_driver+0x1df/0x340 [ 73.795629][ T5832] ? __pfx___device_attach_driver+0x10/0x10 [ 73.797783][ T5832] bus_for_each_drv+0x159/0x1e0 [ 73.799579][ T5832] ? __pfx_bus_for_each_drv+0x10/0x10 [ 73.801533][ T5832] ? lockdep_hardirqs_on+0x78/0x100 [ 73.803401][ T5832] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 73.805521][ T5832] __device_attach+0x1e4/0x4d0 [ 73.807268][ T5832] ? __pfx___device_attach+0x10/0x10 [ 73.809202][ T5832] ? do_raw_spin_unlock+0x145/0x1e0 [ 73.811060][ T5832] device_initial_probe+0xaf/0xd0 [ 73.812867][ T5832] bus_probe_device+0x64/0x160 [ 73.814620][ T5832] device_add+0x11d9/0x1950 [ 73.816291][ T5832] ? __pfx_device_add+0x10/0x10 [ 73.818035][ T5832] ? preempt_schedule_thunk+0x16/0x30 [ 73.820009][ T5832] usb_set_configuration+0xd97/0x1c60 [ 73.821983][ T5832] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 73.824172][ T5832] usb_generic_driver_probe+0xa1/0xe0 [ 73.826071][ T5832] usb_probe_device+0xef/0x400 [ 73.827774][ T5832] ? __pfx_usb_probe_device+0x10/0x10 [ 73.829723][ T5832] really_probe+0x241/0xa60 [ 73.831372][ T5832] __driver_probe_device+0x1de/0x400 [ 73.833258][ T5832] ? usb_driver_applicable+0x1c7/0x220 [ 73.835225][ T5832] driver_probe_device+0x4c/0x1b0 [ 73.837016][ T5832] __device_attach_driver+0x1df/0x340 [ 73.838925][ T5832] ? __pfx___device_attach_driver+0x10/0x10 [ 73.841047][ T5832] bus_for_each_drv+0x159/0x1e0 [ 73.842807][ T5832] ? __pfx_bus_for_each_drv+0x10/0x10 [ 73.844756][ T5832] ? lockdep_hardirqs_on+0x78/0x100 [ 73.846620][ T5832] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 73.848714][ T5832] __device_attach+0x1e4/0x4d0 [ 73.850473][ T5832] ? __pfx___device_attach+0x10/0x10 [ 73.852367][ T5832] ? do_raw_spin_unlock+0x145/0x1e0 [ 73.854224][ T5832] device_initial_probe+0xaf/0xd0 [ 73.856071][ T5832] bus_probe_device+0x64/0x160 [ 73.857794][ T5832] device_add+0x11d9/0x1950 [ 73.859466][ T5832] ? __pfx_device_add+0x10/0x10 [ 73.861210][ T5832] ? add_device_randomness+0xb7/0xf0 [ 73.863117][ T5832] usb_new_device.cold+0x685/0x115c [ 73.864983][ T5832] ? do_raw_spin_lock+0x128/0x260 [ 73.866795][ T5832] ? __pfx_usb_new_device+0x10/0x10 [ 73.868672][ T5832] ? mark_held_locks+0x40/0x70 [ 73.870407][ T5832] hub_event+0x314d/0x4af0 [ 73.872043][ T5832] ? __pfx_hub_event+0x10/0x10 [ 73.873757][ T5832] ? interval_tree_remove+0x8b0/0xef0 [ 73.875697][ T5832] ? finish_task_switch.isra.0+0x1ff/0xb70 [ 73.877798][ T5832] ? process_one_work+0x80b/0x1840 [ 73.879668][ T5832] ? rcu_is_watching+0x12/0xc0 [ 73.881403][ T5832] process_one_work+0x9c2/0x1840 [ 73.883184][ T5832] ? __pfx_process_one_work+0x10/0x10 [ 73.885130][ T5832] ? assign_work+0x19c/0x250 [ 73.886801][ T5832] worker_thread+0x5da/0xe40 [ 73.888489][ T5832] ? kthread+0x17d/0x730 [ 73.890060][ T5832] ? __pfx_worker_thread+0x10/0x10 [ 73.891905][ T5832] kthread+0x3b3/0x730 [ 73.893403][ T5832] ? __pfx_kthread+0x10/0x10 [ 73.895089][ T5832] ? ret_from_fork+0x79/0xaf0 [ 73.896809][ T5832] ? ret_from_fork+0x79/0xaf0 [ 73.898506][ T5832] ? rcu_is_watching+0x12/0xc0 [ 73.900271][ T5832] ? __pfx_kthread+0x10/0x10 [ 73.901948][ T5832] ret_from_fork+0x754/0xaf0 [ 73.903643][ T5832] ? __pfx_ret_from_fork+0x10/0x10 [ 73.905493][ T5832] ? __switch_to+0x7b9/0x10c0 [ 73.907203][ T5832] ? __pfx_kthread+0x10/0x10 [ 73.908887][ T5832] ret_from_fork_asm+0x1a/0x30 [ 73.910667][ T5832] [ 73.912477][ T5832] Kernel Offset: disabled [ 73.913870][ T5832] Rebooting in 86400 seconds..